NAME

       secsipidx - CLI tool and HTTP API server to check or build SIP identity headers

SYNOPSIS

       secsipidx [options]

DESCRIPTION

       Command line application to check or build SIP identity headers as per IETF RFC8224 and RFC8588 (STIR and
       SHAKEN).  It  also  can  be  run in daemon mode, providing HTTP REST API to ease the adoption of STIR and
       SHAKEN by external applications.

OPTIONS

       -H, -http-srv
              http server bind address

       -https-srv
              https server bind address

       -https-pubkey
              https server public key

       -https-prvkey
              https server private key

       -http-dir
              directory to serve over http

       -k, -fprvkey
              path to private key

       -p, -fpubkey
              path to public key

       -fheader
              path to file with header value in JSON format

       -header
              header value in JSON format

       -fpayload
              path to file with payload value in JSON format

       -payload
              payload value in JSON format

       -fidentity
              path to file with identity value

       -identity
              identity value

       -alg   encryption algorithm (default: ES256)

       -ppt   used extension (default: shaken)

       -typ   token type (default: passport)

       -x5u   value of the field with the location of the certificate used to sign the token (default: '')

       -a, -attest
              attestation level (default: 'C')

       -d, -dest-tn
              destination (called) number (default: '')

       -o, -orig-th
              origination (calling) number (default: '')

       -iat   timestamp when the token was created

       -orig-id
              origination identifier (default: '')

       -c, -check
              check validity of the signature

       -s, -sign
              sign the header and payload

       -S, -sign-full
              sign the header and payload, with parameters

       -json-parse
              parse and re-serialize JSON header and payaload values

       -expire
              duration of token validity (in seconds)

       -timeout
              http get timeout (in seconds, default: 3)

       -l, -ltest
              run local basic test

       -version
              print version

       -cache-dir
              path to the directory with cached certificates (default: '')

       -cache-expire
              duration of cached certificates (in seconds, default 3600)

       -ca-file
              file with root CA certificates in pem format

       -ca-inter
              file with intermediate CA certificates in pem format

       -cert-verify
              certificate verification mode (default: 0)

       -crl-file
              file with CRL

       EXAMPLES
              TODO

AUTHOR

       This manual page was written by Victor Seva <vseva@debian.org>, for the Debian project (and may  be  used
       by others).

                                                   2021-01-07                                       SECSIPIDX(1)